CVE-2020-9759

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-494

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://blog.recurity-labs.com/2021-02-03/webOS_Pt1.htmlExploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/09/msg00018.htmlMailing List, Not Applicable, Third Party Advisory
https://blog.recurity-labs.com/2021-02-03/webOS_Pt1.htmlExploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/09/msg00018.htmlMailing List, Not Applicable, Third Party Advisory

Timeline

Published: Mar 23, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-97609.8An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received with longer nick prefixe CVE-2020-97619.8An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configuration, leading to Jav CVE-2020-97677.8A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to CVE-2020-97687.8A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.CVE-2020-97699.8Multiple issues were addressed by updating to version 8.1.1850. This issue is fixed in macOS Catalina 10.15.4. Multiple issues in Vim.CVE-2020-97706.5A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker in a privileged net CVE-2020-97717.1This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A user may gain access to protected parts of CVE-2020-97725.5A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, CVE-2020-97733.3The issue was addressed with improved handling of icon caches. This issue is fixed in iOS 14.0 and iPadOS 14.0. A malicious application may CVE-2020-97747.5An issue existed with Siri Suggestions access to encrypted data. The issue was fixed by limiting access to encrypted data. This issue is fix CVE-2020-97755.3An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This iss CVE-2020-97763.3This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to acces